My DNS Report Errors (Fail & Warn)

Discussion in 'Windows Small Business Server' started by Jim G, Mar 9, 2005.

  1. Jim G

    Jim G Guest

    I checked my report at and see the following problems. I have
    a Dynamic IP and a dynamic DNS service handling my IP. I'm running premium
    with ISA and exhange with a SmartHost. Everything works perfectly. What
    should I do about these failures and warnings?

    (NS) FAIL Missing (stealth) nameservers FAIL: You have one or more missing
    (stealth) nameservers. The following nameserver(s) are listed (at your
    nameservers) as nameservers for your domain, but are not listed at the the
    parent nameservers (therefore, they may or may not get used, depending on
    whether your DNS servers return them in the authority section for other
    requests, per RFC2181 5.4.1). You need to make sure that these stealth
    nameservers are working; if they are not responding, you may have serious
    problems! The DNS Report will not query these servers, so you need to be
    very careful that they are working properly.
    This is listed as an ERROR because there are some cases where nasty problems
    can occur (if the TTLs vary from the NS records at the root servers and the
    NS records point to your own domain, for example).

    (NS) FAIL Stealth NS record leakage Your DNS servers leak stealth
    information in non-NS requests:
    Stealth nameservers are leaked []!
    Stealth nameservers are leaked []!
    This can cause some serious problems (especially if there is a TTL
    discrepancy). If you must have stealth NS records (NS records listed at the
    authoritative DNS servers, but not the parent DNS servers), you should make
    sure that your DNS server does not leak the stealth NS records in response
    to other queries.

    (MX) FAIL MX Category ERROR: I couldn't find any MX records for If you want to receive E-mail on this domain, you should have
    MX record(s). Without any MX records, mailservers should attempt to deliver
    mail to the A record for I can't continue in a case like
    this, so I'm assuming you don't receive mail on this domain.

    (Mail) FAIL Connect to mail servers ERROR: I could not find any mailservers

    (SOA) WARN SOA REFRESH value WARNING: Your SOA REFRESH interval is : 10800
    seconds. This seems a bit high. You should consider decreasing this value to
    about 3600-7200 seconds. RFC1912 2.2 recommends a value between 1200 to
    43200 seconds (20 minutes to 12 hours, with the longer time periods used for
    very slow Internet connections; 12 hours seems very high to us), and if you
    are using DNS NOTIFY the refresh value is not as important (RIPE recommends
    86400 seconds if using DNS NOTIFY). This value determines how often
    secondary/slave nameservers check with the master for updates. A value that
    is too high will cause DNS changes to be in limbo for a long time.

    (WWW) WARN CNAME Lookup WARNING. Your web site ( has a
    CNAME record pointing to That by itself is confusing,
    but acceptable. However, the CNAME record in this case causes an extra DNS
    lookup, which will slightly delay visitors to your website, and use extra
    Jim G, Mar 9, 2005
    1. Advertisements

  2. Hi Jim,

    Contact your ISP. They should fix it.


    Microsoft SBS-MVP
    One of the Magical M&M's

    Marina Roos [SBS-MVP], Mar 10, 2005
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.